Stephan de Wit

@bensmithurst You're right, the whole thing is a bit weird to me (i.e. "enabling" ipfw in `poststart`: https://github.com/opnsense/src/blob/stable/25.1/libexec/rc/rc.d/ipfw#L112-L116). While your fix is correct, this may produce unintended side effects in...

@bensmithurst Sorry, this took a little longer than expected, but I think the change is correct. Would appreciate your feedback as well @fichtner.

For reference, this PR has been followed up by https://github.com/opnsense/core/commit/358bc256933998772c20956dd528b0fe0e7c1d97 to prevent a configd call in the filter reload. This also unearthed an inconsistency resulting in dnctl failing on bootup...

`if_config_tqg_0` is an execution context triggered by interrupts, associated with link state change events and driver/hardware-controlled resets (problaby your I350 or ixl). Nothing to do with core, so transfering this...

@kupferk Thanks for providing the initial details, the code path you mentioned indeed clamps the buf size, explaining the behavior you're seeing. Fixing this however, only fixes the RX path....

@kupferk Great, thanks in advance for testing :) FWIW, this kernel is also suitable for the BE (25.4), I'll ask Franco to add it to the business mirror as well....

@kupferk The panic in a seemingly random location is due to general memory corruption. Looking at the code more closely it seems that no matter what value we set for...

@kupferk Thanks for looking into it. For what it's worth, I don't think it works on Linux either. I believe the products you mentioned do not use `axgbe` for 10Gbit...

@kupferk Fair enough, though looking at the driver code on the linux side there are quite some differences in packet handling - most notably the default usage of the split...

This is mainly intended to prevent locking up your browser with a gazillion records if you decide to show all, but also to cap backend processing time for performance reasons....